NL EN
Privacy

Privacy policy

How Sports Insights bv, the company behind Survey4Bizz, handles personal data on the website, in business contacts and on the Survey4Bizz platform.

At Sports Insights bv, we take data protection seriously. This privacy policy explains which personal data we process, why we do so, how long we keep it and what rights you have. It has been drawn up in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy legislation.

If you still have questions after reading it, please contact us at info@survey4bizz.be.

1. Who are we?

Survey4Bizz is a product of:

Sports Insights bv
Sparrenlaan 9
2627 Schelle
Belgium
Company number: BE 0740.597.869
Email: info@survey4bizz.be

In this policy, Sports Insights bv is also referred to as "we" or "us".

2. When does this privacy policy apply?

Sports Insights bv can deal with personal data in two different ways. It is important to distinguish between them.

2.1 We as data controller

Sports Insights bv is the data controller for the personal data it processes for its own purposes. This concerns:

  • visitors to the website www.survey4bizz.be;
  • people who contact us, for example with a question or a request for a demonstration or quote;
  • contact persons at customers, prospects, suppliers and partners in the context of our business relationship;
  • users of the Survey4Bizz platform, insofar as we process their account data for our own purposes (see point 9.1);
  • existing and potential business customers to whom we send commercial emails, including when we have not received their data from them directly (see point 3.4).

This privacy policy applies in full to those processing activities.

2.2 We as data processor for the Survey4Bizz platform

Organisations that use Survey4Bizz collect data themselves via the platform, for example respondents' answers to a survey. For that data, the customer usually acts as the data controller. The customer decides which data is collected, for what purpose and for how long. Sports Insights bv acts as a data processor and processes that data only on the customer's behalf. A standard data processing agreement (DPA) is available for this. You can read more about this in section 9.

3. Which personal data do we process, why and for how long?

Below you will find, per category, which data we process, for what purpose, on which legal basis and how long we keep it. We do not sell your personal data to third parties, either in whole or in part.

3.1 Visiting the website

  • Data: technical data that your browser sends automatically when you request a page, such as your IP address, the time of the visit, the requested page and information about your browser and device.
  • Purpose: making the website technically available, securing it and detecting faults.
  • Legal basis: our legitimate interest (Article 6(1)(f) GDPR). Without this data, a web page cannot technically be delivered to your browser, and we have an interest in the website working securely and properly.
  • Retention period: we do not store this data ourselves. It is processed only by our hosting provider Netlify, which keeps it in accordance with its own retention policy (see section 4).

3.2 Contacting us

  • Data: your name and email address, and any data you provide yourself, such as your organisation, job title, phone number and the content of your message.
  • Storage: you contact us by email; the website itself has no contact form. Your emails are kept in our mailbox at Microsoft 365.
  • Purpose: answering your question and, if you ask for it, preparing a demonstration or quote. If we subsequently also use your data to send you commercial emails, point 3.4 applies.
  • Legal basis: if your question concerns a possible contract, we process your data to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). In other cases, we rely on our legitimate interest in being able to answer the questions we receive (Article 6(1)(f) GDPR).
  • Retention period: two years after the last relevant contact, if no customer relationship results from it. If a customer relationship does arise, the periods in point 3.6 apply.

3.3 Customers and business contacts

  • Data: name, job title and business contact details of contact persons at customers, prospects, suppliers and partners, and the contract and invoicing data needed for our business relationship.
  • Source: from you or your organisation. For potential customers, the data may also come from the sources listed in point 3.4.
  • Purpose: preparing and performing our contracts, delivering our services, providing support, handling administration and invoicing, and meeting our accounting and tax obligations.
  • Legal basis:
    • the performance of a contract (Article 6(1)(b) GDPR), when you are our contracting party yourself;
    • our legitimate interest in maintaining the business relationship with your organisation (Article 6(1)(f) GDPR), when you are a contact person at an organisation we work with;
    • a legal obligation (Article 6(1)(c) GDPR), for accounting and tax data.
  • Retention period:
    • business contact details of active customers: for the duration of the customer relationship;
    • business contact details of former customers: no longer than five years after the end of the customer relationship, insofar as necessary and justified;
    • prospect data: see point 3.4;
    • invoices and accounting records: in accordance with the applicable statutory retention periods, usually ten years in Belgium, taking any exceptions into account.

3.4 Commercial emails about our products and services (direct marketing)

Sports Insights bv sends commercial emails about Survey4Bizz's own products and services to existing and potential business customers.

  • Data: name, job title, organisation and business contact details, such as email address and phone number.
  • Source: we do not always receive this data from you directly. It may come from:
    • direct professional contact with you or your organisation;
    • publicly available company websites;
    • LinkedIn;
    • address lists from external suppliers, if we purchase them in the future (we currently do not, see section 5);
    • your own request for information, a demonstration or a quote (see point 3.2).
  • Purpose: informing existing and potential business customers about Survey4Bizz's own products and services.
  • Legal basis: collecting and storing business contact details in order to inform existing and potential business customers is based on our legitimate interest in promoting our own products and services (Article 6(1)(f) GDPR). We limit ourselves to business data that is relevant to your job. Sending commercial emails is also subject to the rules below. Where your consent is required for this, sending is based on that consent (Article 6(1)(a) GDPR).
  • Rules for commercial emails: in addition to the GDPR, the rules of Book XII of the Belgian Code of Economic Law and the Royal Decree of 4 April 2003 apply. Without your prior consent, we therefore only send commercial emails:
    • to general, non-personal email addresses of organisations, such as info@ or sales@;
    • to existing customers, about products and services similar to those they already obtain from us, provided they were given the opportunity to refuse such use when their email address was collected.
    In other cases, we only send commercial emails to personal business email addresses (such as firstname.lastname@organisation.be) after you have given your consent. Every commercial email clearly states that it comes from Sports Insights bv and contains an unsubscribe link.
  • Information when we have not received your data from you: in that case, you have the right to information about the processing and about the source of your data. We inform you of this within a reasonable period and no later than one month after obtaining your data. If we contact you before then, we do so at the latest at that first contact. We then tell you the source of your data, refer you to this privacy policy and point out your right to object and to unsubscribe.
  • Retention period:
    • prospect data obtained through business contact, LinkedIn, public company websites or purchased address lists: no longer than two years after the last relevant contact. If the processing is no longer necessary or lawful before then, we delete the data earlier;
    • contact details for commercial emails: for as long as the processing remains lawful and necessary, and no longer than two years after the last relevant interaction, such as a reply or other business contact. After you unsubscribe or object, we immediately stop sending you commercial emails.

Objecting and unsubscribing. You can object at any time to the use of your data for direct marketing. You can unsubscribe from our commercial emails easily and free of charge, by sending an email to info@survey4bizz.be or via the unsubscribe link at the bottom of every commercial email. We will then no longer use your data for direct marketing.

After you unsubscribe, we only keep your email address and the date of unsubscribing, so that we can prevent you from receiving commercial emails again.

3.5 Minors

The website is aimed at organisations and professionals. We do not knowingly collect personal data from children or minors via the website. If we find that we have nevertheless received such data, we will delete it as soon as reasonably possible.

3.6 Overview of retention periods

The periods below form our retention policy. When a period ends, we delete the data, unless we need to keep it longer to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

Data categoryRetention period
Contact, quote and demo requests without a customer relationshipTwo years after the last relevant contact
Prospect data obtained through business contact, LinkedIn, public company websites or purchased address listsNo longer than two years after the last relevant contact, with earlier deletion if the processing is no longer necessary or lawful
Business contact details of active customersFor the duration of the customer relationship
Business contact details of former customersNo longer than five years after the end of the customer relationship, insofar as necessary and justified
Invoices and accounting recordsIn accordance with the applicable statutory retention periods, usually ten years in Belgium, taking any exceptions into account
Contact details for commercial emailsFor as long as the processing remains lawful and necessary, and no longer than two years after the last relevant interaction, with an immediate stop to commercial emails after unsubscribing or objecting
Technical data from website visits (log files at Netlify)We do not store this data ourselves. Netlify keeps it in accordance with its own retention policy.
Record of unsubscriptions and objections to direct marketingFor as long as we send commercial emails. We only keep the email address and the date of the unsubscription or objection.

4. External services, cookies and links on the website

4.1 Hosting by Netlify

The website www.survey4bizz.be is hosted by Netlify. It is an informational website: it has no forms, no customer accounts and no surveys, and we do not store any personal data via the website. On every visit, Netlify does process the technical data described in point 3.1, because this is necessary to deliver the pages to your browser. Netlify acts as our data processor for this. More information can be found in Netlify's privacy policy.

The Survey4Bizz platform and the data processed in it are not hosted at Netlify. They are hosted on Microsoft Azure (see section 6 and section 7).

4.2 Fonts

The fonts on this website (Plus Jakarta Sans and DM Sans) are loaded from our own hosting at Netlify, together with the website itself. Your browser does not connect to Google servers or any other external font service for this.

4.3 Cookies and tracking

The website itself contains no code that sets cookies, and uses no analytics, advertising or tracking tools. Netlify does not set any cookies when delivering this website either. That is why we do not show a cookie banner.

4.4 Links to other websites

The website contains links to third-party websites. This privacy policy does not apply to those websites. Please consult the privacy policy of the website concerned.

5. Who do we share personal data with?

We treat your data confidentially. We only share it with service providers we need in order to offer the website and our services, and only to the extent necessary for their task. These are:

  • Netlify: hosting of the commercial website, only for the technical data from website visits (see section 4);
  • Microsoft: hosting of the Survey4Bizz platform on Microsoft Azure (see section 7), and email and office applications via Microsoft 365;
  • Mollie: payment processing;
  • Okioki: accounting.

We currently do not purchase address lists from external suppliers. If we do so in the future (see point 3.4), those suppliers are a source of data, not recipients: we do not pass on any personal data to them. We will then list them in this privacy policy.

In addition, we only pass on personal data to public authorities when we are legally required to do so.

6. Is data processed outside the European Economic Area?

The data of the Survey4Bizz platform stays in the European Union. It is hosted on Microsoft Azure: the SQL database data is stored in Belgium and the application servers are located within the European Union.

Netlify and Microsoft are US companies. When the website is delivered, the technical data described in point 3.1 may be processed outside the European Economic Area (EEA) via Netlify's global network. Limited transfers outside the EEA cannot be ruled out for Microsoft 365 either, for example for support or security. Such transfers rely on the appropriate safeguards under the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

If another service provider listed in section 5 processes data outside the EEA, this likewise only takes place with such appropriate safeguards.

7. How do we protect personal data?

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or destruction.

The website can only be accessed via an encrypted HTTPS connection.

For the Survey4Bizz platform, the measures include:

  • hosting on Microsoft Azure;
  • SQL database data stored in Belgium;
  • application servers within the European Union;
  • authentication via Keycloak;
  • mandatory multi-factor authentication (MFA) for platform users;
  • role-based access rights, so that users only have access to what their role requires.

Within Sports Insights bv, only employees and contractors who need personal data for their tasks have access to it.

More information can be found on the Hosting and security page.

8. What happens in the event of a data breach?

A data breach is a security incident in which personal data is lost, destroyed or altered, or falls into the hands of unauthorised persons.

  • As data controller, we notify the Belgian Data Protection Authority of a data breach without undue delay and, where feasible, within 72 hours of becoming aware of it. This is not required if the breach is unlikely to result in a risk to the rights and freedoms of the individuals concerned. If the breach is likely to result in a high risk, we also inform the individuals concerned without undue delay.
  • As data processor for the platform, we inform the customer concerned without undue delay after becoming aware of a data breach. As data controller, the customer decides on notification to the supervisory authority and to the individuals concerned. Further arrangements are set out in the data processing agreement.

We document every data breach, including its effects and the measures taken.

9. The Survey4Bizz platform: customers and respondents

9.1 Role of the customer and of Sports Insights bv

For the data that an organisation collects via the Survey4Bizz platform, such as questionnaires and answers, that organisation is usually the data controller. It decides which data is collected, for what purpose and how long it is kept.

Sports Insights bv acts as a data processor. We process this data only on the customer's behalf and in accordance with the standard data processing agreement (DPA). Customers can request it at info@survey4bizz.be.

For the account data of platform users, such as username, email address and the data used for sign-in and MFA, Sports Insights bv has two roles:

  • for managing users and their roles on the customer's behalf, we are a data processor;
  • for what we need for our own purposes, such as securing the platform, sign-in logs, detecting misuse, invoicing and support, we are the data controller. This privacy policy applies to that processing.

9.2 Are you a respondent?

Have you completed a survey offered via Survey4Bizz? Depending on how the organisation has set up the survey, you take part anonymously, via a personalised link or as an assigned user.

For questions about your answers, or to exercise your rights, please first contact the organisation that runs the survey. That organisation is responsible for the processing, and its own privacy policy applies.

If you contact us directly, we will refer you to that organisation or pass your request on to it, insofar as we can determine which organisation is involved.

10. What are your rights?

For the personal data for which Sports Insights bv is the data controller, you have the following rights under the GDPR:

  • Right of access: you can ask whether we process personal data about you and, if so, which data. You can receive a copy of that data. If we have not received your data from you directly, you are also entitled to the available information about its source.
  • Right to rectification: you can have inaccurate data corrected and incomplete data completed.
  • Right to erasure: you can ask us to delete your data, for example when it is no longer needed for the purpose for which it was collected, when you withdraw your consent or when the processing is unlawful. This right does not apply in all cases, for example when we must keep the data to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
  • Right to restriction of processing: in certain cases, you can ask us to temporarily restrict the processing of your data, for example while we check whether your data is accurate.
  • Right to object: you can object to processing based on our legitimate interest, on grounds relating to your particular situation. You can always object to the use of your data for direct marketing, and we will then stop doing so in any event (see point 3.4).
  • Right to data portability: for data you have provided to us yourself and that we process by automated means on the basis of your consent or a contract, you can ask to receive it in a structured, commonly used and machine-readable format or to have it transmitted to another controller.
  • Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before the withdrawal.

How do you exercise your rights?

Send your request to info@survey4bizz.be.

Exercising your rights is free of charge. We respond within one month of receiving your request. If your request is complex, or if we receive a large number of requests, this period may be extended by two further months. In that case, we will inform you within the first month, stating the reason.

We do not routinely ask for a copy of your identity card. Only if we have reasonable doubts about your identity, and where this is necessary and proportionate, may we ask for additional information to confirm that the request really comes from you.

Does your question concern answers you gave in a survey? Please read point 9.2.

11. Filing a complaint

Do you have a complaint about the way we handle your personal data? Please feel free to contact us first, so that we can look for a solution together.

You also always have the right to lodge a complaint with the Belgian supervisory authority:

Data Protection Authority (Gegevensbeschermingsautoriteit, GBA)
Drukpersstraat 35
1000 Brussels
Belgium
www.dataprotectionauthority.be

12. Applicable law

This privacy policy is governed by Belgian law. Disputes fall within the jurisdiction of the courts of Antwerp, Antwerp division, unless mandatory rules provide otherwise. This does not affect your right to lodge a complaint with the Data Protection Authority.

13. Changes

We update this privacy policy when our processing activities or the regulations change. The date at the top of this page shows when the policy was last updated.

14. Contact

For questions or comments about this privacy policy, or about the way we process personal data, please contact:

Sports Insights bv
Sparrenlaan 9, 2627 Schelle, Belgium
Email: info@survey4bizz.be

This privacy policy is available in Dutch and English. In the event of any discrepancy between the two versions, the Dutch text prevails.